sync: update from private repo (ddadfd71)

config.yaml.example

@@ -462,7 +462,7 @@ tools:
 # notifications:
 #   push:
 #     enabled: false                                   # true で V2 を有効化
-#     vapid_subject: "https://maestro.example.com/"     # RFC 8292 — operations URL preferred
+#     vapid_subject: "https://maestro.example.com/"    # RFC 8292 — operations URL preferred (運用サイトの URL か mailto:)
 #     vapid_current_path: "./data/secrets/vapid.json"  # 自動生成 (mode 0600)
 #     vapid_history_dir: "./data/secrets/vapid-history"
 #     payload_max_bytes: 3072                          # JSON byte length cap (上限 4096)
@@ -479,3 +479,10 @@ tools:
 #   enabled: false
 #   issuer: "https://localhost:8080/oidc"         # 認可サーバーの issuer（公開 URL）
 #   resource_audience: "https://localhost:8080/a2a"  # トークン audience（A2A endpoint）
+#   limits:
+#     rate_per_minute: 30            # ingress requests/min per delegation (token bucket)
+#     max_concurrent_tasks: 5        # simultaneous in-flight A2A tasks per delegation
+#     max_payload_bytes: 65536       # HTTP body + message size cap
+#     max_stream_seconds: 600        # max SSE stream duration (task + resubscribe)
+#     skill_budget_per_hour: 100     # accepted tasks per rolling hour per delegation
+#     max_concurrent_resubscribe: 5  # simultaneous tasks/resubscribe streams per delegation